For those nodes connected directly to Internet you may want to configure a set of firewall rules. This is an example which must be adapted to each situation.They should be added to the file /etc/firewall.user